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Abstract 

- The fading broadcast channel with confidential messages (BCC) is investigated, 

where a source node has common information for two receivers (receivers 1 and 2) , and 
has confidential information intended only for receiver 1. The confidential information 
needs to be kept as secret as possible from receiver 2. The broadcast channel from the 
source node to receivers 1 and 2 is corrupted by multiplicative fading gain coefficients 
in addition to additive Gaussian noise terms. The channel state information (CSI) is 
assumed to be known at both the transmitter and the receivers. The parallel BCC 
with independent subchannels is first studied, which serves as an information-theoretic 
t/j \ model for the fading BCC. The secrecy capacity region of the parallel BCC is estab- 

lished. This result is then specialized to give the secrecy capacity region of the parallel 
BCC with degraded subchannels. The secrecy capacity region is then established for 
the parallel Gaussian BCC, and the optimal source power allocations that achieve the 
£SJ . boundary of the secrecy capacity region are derived. In particular, the secrecy capacity 



o 



region is established for the basic Gaussian BCC. The secrecy capacity results are then 



applied to study the fading BCC. The ergodic performance is first studied. The ergodic 

C — ■ 

secrecy capacity region and the optimal power allocations that achieve the boundary 
■ of this region are derived. The outage performance is then studied, where a long term 

power constraint is assumed. The power allocation is derived that minimizes the out- 
age probability where either the target rate of the common message or the target rate 
of the confidential message is not achieved. The power allocation is also derive that 



minimizes the outage probability where the target rate of the confidential message is 
not achieved subject to the constraint that the target rate of the common message 
must be achieved for all channel states. 



^The material in this paper was presented in part at the 44th Annual Allerton Conference on Communi- 
cation, Control, and Computing, Monticello, IL, Sept. 2006. 

2 The research was supported by the National Science Foundation under Grant ANI-03-38807 and by 
National Science Foundation. 

3 Yingbin Liang and H. Vincent Poor are with the Department of Electrical Engineer- 
ing, Princeton University, Engineering Quadrangle, Olden Street, Princeton, NJ 08544; e-mail: 
{yingbinl,poor}@princeton.edu; Shlomo Shamai (Shitz) is with the Department of Electrical 
Engineering, Technion-Israel Institute of Technology, Technion City, Haifa 32000, Israel; email: 
sshlomoOee . technion .ac.il 



1 



1 Introduction 



Wireless communication has a broadcast nature, where security issues are captured by a basic 
wire-tap channel introduced by Wyner in [1]. In this model, a source node wishes to transmit 
confidential information to a destination node and wishes to keep a wire-tapper as ignorant 
of this information as possible. The performance measure of interest is the secrecy capacity, 
which is the largest reliable communication rate from the source node to the destination 
node with the wire-tapper obtaining no information. The secrecy capacity was given in [1] 
for the discrete memoryless wire-tap channel and in [2] for the Gaussian wire-tap channel. 
The wire-tap channel was considered recently for the fading and multiple antenna channels 
in [3,4]. A more general model of the wire-tap channel was studied by Csiszar and Korner 
in [5], where the source node also has a common message for both receivers in addition to the 
confidential message for only one receiver. This channel is regarded as the broadcast channel 
with confidential messages (BCC). The capacity-equivocation region and the secrecy capacity 
region of the BCC were characterized in [5]. The BCC was further studied recently in [6], 
where the source node transmits two confidential message sets for two receivers, respectively, 
in addition to the common message for both receivers. 

In this paper, we investigate the fading BCC, which is based on the BCC studied in [5] 
with the channels from the source node to receivers 1 and 2 corrupted by multiplicative 
fading gain coefficients in addition to additive Gaussian noise terms. The fading BCC model 
captures the basic time- varying property of wireless channels, and hence understanding this 
channel plays an important role in solving security issues in wireless applications. For the 
fading BCC, we assume that the fading gain coefficients are stationary and ergodic over 
time. We further assume that the channel state information (CSI) is known at both the 
transmitter and the receivers. The CSI at the source node can be realized by a reliable 
feedback from the two receivers, who are supposed to receive information from the source 
node. 

The fading BCC we study in this paper relates to or generalizes a few channels that have 
been previously studied in the literature. Compared to the fading broadcast channel that 
was studied in [7-11], the fading BCC requires an additional secrecy constraint that the 
confidential information for one receiver must be perfectly secret from the other receiver. 
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Compared to the fading wire-tap channel studied in [12] (the conference version of this 
paper), [13] and [14] (full CSI case), the fading BCC we study in this paper assumes that the 
source node has a common message for both receivers in addition to the confidential message 
for receiver 1. Hence the fading BCC includes the fading wire-tap channel as a special case. 
The fading BCC also includes the parallel Gaussian wire-tap channel studied in [15] (the 
case where wire-tappers cooperate) as a special case for the same reason as above and also 
because a power constraint is assumed for each subchannel in [15]. 

Before studying the fading BCC, we first study a more general model of the parallel BCC 
with L independent subchannels, where the source node communicates with receivers 1 and 
2 over L parallel links. This model serves as a general information-theoretic model that 
includes the fading BCC as a special case. We establish the secrecy capacity region of the 
parallel BCC. In particular, we provide a converse proof to show that independent input 
distribution for each subchannel is optimal to achieve the secrecy capacity region. This fact 
does not follow directly from the single letter characterization of the secrecy capacity region 
of the BCC given in [5]. The secrecy capacity region of the parallel BCC further gives the 
secrecy capacity region of the parallel BCC with degraded subchannels. 

We further study the parallel Gaussian BCC, which is an example parallel BCC with 
degraded subchannels. We show that the secrecy capacity region of the parallel Gaussian 
BCC is a union over the rate regions achieved by all source power allocations (among the 
parallel subchannels). Moreover, we derive the optimal power allocations that achieve the 
boundary of the secrecy capacity region and hence completely characterize this region. The 
secrecy capacity region of the parallel Gaussian BCC also establishes the secrecy capacity 
region for the basic Gaussian BCC. This result complements the secrecy capacity region of 
the discrete memoryless BCC given by Csiszar and Korner in [5]. 

We then apply our results to investigate the fading BCC. We first study the ergodic per- 
formance, where no delay constraints on message transmission are assumed and the secrecy 
capacity region is averaged over all channel states. Now the fading BCC can be viewed as 
the parallel Gaussian BCC with each fading state corresponding to one subchannel. Thus, 
the secrecy capacity region of the parallel Gaussian BCC applies to the fading BCC. In 
particular, since the source node knows the CSI, it can dynamically change its transmission 
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power with channel state realization to achieve the best performance. We obtain the optimal 
power allocations that achieve the boundary of the secrecy capacity region for the fading 
BCC. 

We further study the outage performance of the fading BCC, where messages must be 
transmitted over a certain time (one block) to satisfy the delay constraint. We adopts the 
block fading model, where the fading coefficients remain constant over one block and change 
to another realization in the next block. The block length is assumed to be large enough to 
guarantee decoding in one block. We assume the power constraint at the source node applies 
over many blocks (i.e., it is a long term power constraint as in [16]). As in the analysis of 
the ergodic performance, we assume that the CSI is known both at the transmitter and at 
the receivers, and hence the source node can allocate its transmission power to achieve the 
best outage performance. We first obtain the power allocation that minimizes the outage 
probability where either the target rate of the common message or the target rate of the 
confidential message is not achieved. We then obtain the power allocation that minimizes 
the outage probability where the target rate of the confidential message is not achieved 
subject to the constraint that the target rate of the common message must be achieved for 
all channel states. 

In this paper, we use -X"[i,l] to indicate a group of variables (X 1? X 2 , . . . , X L ), and use X™ L , 
to indicate a group of vectors (X™, X$, • • • , -X"£), where X™ indicates the vector (Xn,Xi 2 , . . . , Xi n ). 
Throughout the paper, the logarithmic function is to the base 2. 

The paper is organized as follows. We first study the parallel BCC with independent 
subchannels, and its special case of the parallel BCC with degraded subchannels. We next 
study the parallel Gaussian BCC. We then study the ergodic and outage performances of the 
fading BCC and demonstrate our results with numerical examples. We conclude the paper 
with a few remarks. 

We note that the wire-tap channel has also been studied in the work [17-27] and references 
therein. The topic of common randomness and secret key capacity in communication systems 
has been studied in [28-30]. Such communication system may be viewed as a wire-tap 
channel with side information (which might be common randomness, i.e., a key at a certain 
rate). Other related work on this topic can be found in [31-39] and references therein. We 
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also remark that the secrecy rate/capacity has also been studied for the multiple access 
channel [40-43] the relay channel in [44], and the interference channel in [6]. 

2 Parallel BCCs 
2.1 Channel Model 

We consider the parallel BCC with L independent subchannels (see Fig. [I]), where there are 
one source node and two receivers. Each subchannel is assumed to be a general broadcast 
channel from the source node to the two receivers. As in the BCC, the source node wants 
to transmit common information to both receivers and confidential information to receiver 
1. Moreover, the source node wishes to keep the confidential information to be as secret as 
possible from receiver 2. 

More formally, the parallel BCC consists of L finite input alphabets X\\_,l\-> and 2L finite 
output alphabets 3^[i,l] and Z[i,l]- The transition probability distribution is given by 

L 

p(y[l,L], Z[1,L)\ X [1,L}) = YlPliVh z l\ x l) (!) 

1=1 

where Xi G X[, y\ G 3^z, and Zi G Z\ for I — 1, . . . , L. 

If the parallel BCC has only one subchannel, i.e., L = 1, this channel becomes the BCC 
studied in [5]. Moreover, each subchannel is assumed to be a general broadcast channel as 
in [5] and is not necessarily degraded as assumed in [1]. 

A (2 nR ° } 2 nRl } n) code consists of the following: 

• Two message sets: W = {1,2,..., 2 nR °} and Wi = {1,2,..., 2 nR °} with the 
messages W and W\ uniformly distributed over the sets Wo and Wi, respectively; 

• One (stochastic) encoder at the source node that maps each message pair (w , wi) G 
(Wo, Wi) to a codeword x 1 ^ L y, 

• Two decoders: one at receiver 1 that maps a received sequence yV^ L , to a message 
pair (w^\wi) G (Wo, Wi); the other at receiver 2 that maps a received sequence 

L j to a message Wq G Wq. 
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Figure 1: Parallel BCC 

The secrecy level of the confidential message W\ achieved at receiver 2 is measured by the 
equivocation rate defined as follows: 



-H (W 1 

n \ 



(2) 



The higher the equivocation rate, the less information that receiver 2 obtains about the 
confidential message W\. 



The probability of error when the message pair (wq,wi) is sent is defined as 



P e (w ,wi) = Pr \ (w { q\wi) ^ (w ,wi) or w^> ^ w 



(2) 



(3) 



and the average probability of error is 



2 nR 2" fl i 



(4) 



WQ = 1 W]_ = l 



A rate-equivocation triple (Rq, R\, R e ) is achievable if there exists a sequence of (2 nRo , 2 nRl , n) 
codes with the average probability of error P e — > as n goes to infinity and with the equiv- 
ocation rate R e satisfying 

(5) 



R e < lim -H (W x 

n— >oo n \ 



In this paper, we focus on the case in which perfect secrecy is achieved, i.e., receiver 2 does 
not obtain any information about the message W\. This happens if R e = R\. The secrecy 
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capacity region C s is defined to be the set that includes all (R , Ri) such that (R , R\,R e = 
Ri) is achievable, i.e., 

C s = j(-Ro>-Ri) : (Ro,Ri,R e — Ri) is achievable j. (6) 

2.2 Secrecy Capacity Region of Parallel BCCs 

For the parallel BCC, we obtain the following secrecy capacity region. 



Theorem 1. The secrecy capacity region of the parallel BCC is given by 

(Ro, Ri 

c= U 

] [ \p(qi)p(ui\qi)p(xi\ui)p(yi, zi\xi) 



R < min (e/(^;1z), E HQi; Z i 
U=i i=i 

Ri<E UiUuY^-IiUuZ^ 
1=1 1 



} (7) 



where Qi can be chosen as a deterministic function of U\ for I = 1, . . . , L. 

If the source node transmits only confidential information to receiver 1, i.e., Rq = 0, the 
parallel BCC becomes the parallel wire-tap channel. The secrecy capacity of this channel 
follows from Theorem[T]by noticing that I(Ui\ Yi\Qi)—I(Ui; Zi\Qi) is maximized by a constant 
Qi- 

Corollary 1. The secrecy capacity of the parallel wire-tap channel is 

L 

C s = Y, C s ] ( 8 ) 



where C l s is the secrecy capacity of subchannel I and is given by 



max 



I{U l -Y l )-I{U l -Z l 



(9) 



The maximum in the preceding equation is over the distributions p(ui, xi)p(yi, zi\x{) , which 
satisfies the Markov chain condition Ui — > Xi — >• (Yi, Z{). 

Remark 1. Theorem^ shows an important fact that independent input distribution for each 
subchannel is optimal. This fact does not follow directly from the single letter result on the 
secrecy capacity of the BCC given in [5], although the parallel BCC can be viewed as a special 
case of the BCC. Hence a converse proof is needed, which is provided in AppendixlAi 
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We note that the secrecy capacity region Ci of subchannel I is given in [5, Corollary 1], 
i.e. , 

f (Ro,Ri): ) 
Ci l) = |J I Ro < mm {IiQf,^), J(Q,;Z,)} >■ (10) 

p(qMui\qMxi\uMy h Zilx^ ( R i < i{Ui;Yi\Qi) - J(c/i;^|Q,) J 

We now define the sum of the secrecy capacity regions of the subchannels to be 

f (Ro,Ri): | 
c snm := \ Ro = J2iRio, Rl = J2lRlli > (ii) 

[ with (ifo, e Ci° for Z = 1, L. J 

If we compare C s with C sum , we make the following remark. 

Remark 2. The secrecy capacity region C s in Theorem^ may be larger than the sum C sum 
of the secrecy capacity regions of the subchannels. Hence the secrecy capacity region of the 
parallel BCC is achieved by coding over all parallel subchannels. 

This observation was also made in [45] for the broadcast channel with common messages. 
This fact follows because the common rate has the following property 

Ro = min j £l(Q, ; y { ), J]l(Q^)] 

I i=i i=i J (12) 

L L 

>^min{/(Q i; ^), I{Q l ;Z l )} = Y,Rw 
i=i i=i 

It can also be seen from the following simple example. For simplicity, we consider the case 

in which the source node has only the common message for both receivers. We further 

assume L = 2, and each subchannel is a deterministic broadcast channel for I = 1, 2 (see 

Fig. [2]). For subchannel 1, the link capacities to receivers 1 and 2 are C\\ = 3 and G\i = 4, 

respectively. For subchannel 2, the link capacities to receivers 1 and 2 are Gi\ = 7 and 

C22 = 5, respectively. The capacity of this parallel channel is given by 

C = min{C n + C 21 , C 12 + C 22 } = min{3 + 7, 4 + 5} = 9. (13) 

However, the sum of the capacities of the two subchannels is 

2 

min{C u , Q 2 } = min{3, 4} + min{7, 5} = 8 (14) 

i=i 
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Figure 2: A parallel BCC example 



which is clearly smaller than the capacity given in (|T3l) . 

Similar to Theorem 14.6.1 in [46], we obtain the following lemma for the BCC studied 
in [5], which also applies to the parallel BCC we study in this paper. 

Lemma 1. The secrecy capacity region of the BCC studied in [5] depends only on the 
marginal transition probability distributions p(y\x) of the channel from the source node to 
receiver 1 and p(z\x) of the channel from the source node to receiver 2. 

Proof. The proof follows from the reasoning in [46, p. 454, Prob. 10] and the fact that the 



One application of Lemma [T] is to obtain the following generalization of the result in [2] 
for the Gaussian wire-tap channel, which is a special case of the BCC. 

Corollary 2. The secrecy capacity of the Gaussian wire-tap channel given in [2, Theorem 1] 
holds for the case, where the noise variables at the destination node and the wire-tapper have 
a general correlation structure. 

Lemma [1] will be useful in establishing the secrecy capacity region of the parallel Gaussian 
BCC in Section H 

2.3 Parallel BCCs with Degraded Subchannels 

In the following, we study a special class of parallel BCCs, which specializes to the parallel 
Gaussian BCC that is considered in Section^ and is hence of particular interest. 




depends only on the marginal distribution of p(z\x). □ 
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Figure 3: Parallel BCC with degraded subchannels 



We consider the parallel BCC with degraded subchannels (see Fig. [3]), where each sub- 
channel is either degraded such that the output at receiver 2 is a degraded version of the 
output at receiver 1, or degraded such that the output at receiver 1 is a degraded version of 
the output at receiver 2. Note that although each subchannel is degraded, the entire channel 
may not be degraded because the subchannels may not be degraded in the same fashion. 

We define A to be the index set that includes all indices of subchannels, where the output 
at receiver 2 is a degraded version of the output at receiver 1, i.e., 

pi(yi,zi\xi) = Pi(yi\xi)pi(zi\yi) for I G A. (15) 

Hence the Markov chain condition X\ — > Y\ — ► Z\ is satisfied for / e A. We define A c to be 
the complement of the set A, and A c includes all indices of subchannels, where the output 
at receiver 1 is a degraded version of the output at receiver 2, i.e., 

PliVh zi\xi) = pi(zi\xi)pi(yi\zi) for I e A c . (16) 

Hence the Markov chain condition X\ — > Z\ —>■ Y\ is satisfied for I 6 A c . The channel 
transition probability distribution is given by 

p{y[i,L], Z[i )L }\x [ltL] ) = Yl [pi{yi\xi)pi{zi\yi)^ Yl [pii z i\ x i)Pi(Vi\ z i) ■ ( 17 ) 

leA ieA c 
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For the parallel BCC with degraded subchannels, we apply Theorem [T] and obtain the 
following secrecy capacity region. 

Corollary 3. The secrecy capacity region of the parallel BCC with degraded subchannels is 



u 



II \p{Qi)p{ui\qi)p{xi\ui)p{yi\xi)p{zi\yi)] 

leA 

■ II \p{qi)p(ui\qi)p(xi\ui)p(zi\xi)p(yi\zi)] 
ieA c 



(R ,Ri) : 



R < min <| E I(Q f , Y t ) + E Y t ), £ J (Qh Z t ) + £ z i) 

JeA ieA c leA i£A c 



leA L 

Remark 3. It can be seen that the common message Wo is sent over all subchannels, and 
the private message W\ for receiver 1 is sent only over the subchannels where the output at 
receiver 2 is a degraded version of the output at receiver 1, i.e., I G A. Furthermore, over 
these subchannels, the messages W and W\ are sent by using the superposition encoding 
scheme. 



Proof. The achievability follows from Theorem [T] by setting Ui = X; for / e A and setting 
Qi = Ui = X l for I e A c . 



(19) 



To show the converse, we first note that for I G A c , 

HQtlZfiKIiXuZi) 

which follow from the Markov condition Q\ — ► X\ — > (YiZ{). We apply the bounds in (fT9l) to 
the bound on R given in (j7j) and obtain the bound on R given in ffTSl . 

For I G A c , we also obtain 

HUtiYilQd-HUtZAQi) 

</(£/,; 

= I(U f , Z t \Qi) + I(Ur, YilQiZi) - I(U f , Z X \Q X ) 
= 



(20) 



11 



where the last equality follows because I(Uf,Yi\QiZi) = due to the degraded condition 

(US]). 

For I G A, we obtain the following bound 

/(£/,; ^|q,)-A^;^/IQ0 

= /(X^; Y^IQO - I(X,; ^|Q,f/,) - I(X^; Z,|Q,) + /(X,; Z,|Q,tf,) 
= I(X Z ; K,|Q,) + I(U f , Yi\QiXi) - I(X r , Y^) 
- I{Xu ZtlQi) - /(£/,; Z,|Q,X { ) + /(X,; Z { |C7,) 

(a) (21) 

l = J I(X*; K,|Q0 - /(X; Y^) - /(X,; 2i|Q ( ) + I(X f , Zi\Ui) 

< I(X r , Y t \Qi) - /(X; Y^) - I(X f , Z t \Qi) + I(X V , Y^lJi) 

= I{Xu Yi\Qi) - I(X t ; Yi\Ut) - I(X f , Z l \Q l ) + /(X,; Y^) + J(X Z ; Z^Y) 

{ <I{X l ;Y l \Q l )-I{X l ;Z l \Q l ) 
where (a) follows because I(Ui; Yi\QiX t ) = and I(Ui; Zi\QiX{) = due to the Markov chain 
condition Qi — > JJ\ — > X^ — > (1^), and (6) follows because l{Xi\Zi\U]Yi) = due to the 
degraded condition (|T5|) . 

By applying the bounds (1201) and (I2T]) to the bound on Ri given in ((Tj), we obtain the 
bound on Ri given in (|18|) . This concludes the proof of the converse. □ 



3 Parallel Gaussian BCCs 



In this section, we study the parallel Gaussian BCCs, where the channel outputs at receivers 1 
and 2 are corrupted by additive Gaussian noise terms. The channel input-output relationship 
is given by 

Y u = X u + W lh Z u = X u + V U , for I = 1, . . . , L (22) 

where % is the time index. For I = 1, . . . , L, the noise processes {W^} and {Vu} are in- 
dependent identically distributed (i.i.d.) with the components being zero mean Gaussian 
random variables with the variances /z 2 and z/ 2 , respectively. We assume /i 2 < uf for I G A 
and fif > vf for I G A c . The channel input sequence XS L i is subject to the average power 
constraints P, i.e., 

1 n L 

1=1 1=1 
12 



We now apply Lemma [T] to obtain the secrecy capacity region of the parallel Gaussian 
BCC. It can be seen from (1221) that the subchannels of the parallel Gaussian BCC are not 
physically degraded. We consider the following subchannel: 

Y u = X u + W u , Z u = X H + W H + V',, for I G A; 



Y u = X u + V U + WL 



u ■ 



for I G A c ; 



(24) 



where {W 7 ^} and {V^} are i.i.d. random processes with components being zero mean Gaussian 
random variables with the variances [if — uf (for I G A c ) and vf — $ (for I G A) , respectively 
Moreover, {V/A- is independent of {Wu} and {W^} is independent of {Vu}. It can be seen 
that the channel defined in ff24|) has physically degraded subchannels. This channel has the 
same marginal distributions p{y\x) and p(z\x) as the parallel Gaussian BCC defined in 
Hence by Lemma dj the two channels have the same secrecy capacity region. 



For the channel defined in (T2"l"|) . we can apply Corollary [3] to obtain the secrecy capacity 
region. In particular, the degradedness of the subchannels allows the use of the entropy 
power inequality in the proof of the converse. The secrecy capacity region obtained for this 
channel also applies to the parallel Gaussian BCC defined in ff22l . and is presented in the 
following theorem. The details of the proof is relegated to Appendix [B] 

Theorem 2. The secrecy capacity region of the parallel Gaussian BCC is 
(i?o, Ri) '■ 



ci=U 



n + Pn 

Pio 
vf + pn 



1 + 



Pio 



l&A 



- log ( 1 + -j - - log 1 + -j 



I'J 

Pio 



2 / ' 



(25) 



where p is the power allocation vector, which consists of (pio, pn) for I G A and pio for I G A c 
as components. The set V includes all power allocation vectors p that satisfy the power 
constraint (1231 . i.e., 

" (26) 



V:=lp:J2\Pio+Pii] + J2P lo ^ P \ 
I leA leA? J 



Note that p indicates the power allocation among all subchannels. For / G A, since the 
source node transmits both common and confidential messages, pio and pn indicate the 
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powers allocated to transmit the common and private messages, respectively. For I £ A c , 
the source transmit only the common message, and pio indicates the power to transmit the 
common message. 

If L = 1, the parallel Gaussian BCC becomes the Gaussian BCC The following secrecy 
capacity region of the Gaussian BCC follows directly from Theorem [21 

Corollary 4. The secrecy capacity region of the Gaussian BCC is 
(Ro, Ri) : 



c= U 

0</Kl 



R < min { - log ( I 



Ri < 



/i 2 + BP J ' 2 8 V f 2 + HP 



V 



where (x) + = x if x > and (x) + = if x < 0. 



(27) 



To characterize the secrecy capacity region of the parallel Gaussian BCC given in fl25l) . we 
need to characterize every boundary point and the corresponding power allocation vector 
that achieves this boundary point. It is clear that the secrecy capacity region given in ( 1251) is 
convex due to the converse proof in Appendix [Bl Hence the boundary of the secrecy capacity 
region can be characterized as follows. For every point (R$, R{) on the boundary, there exist 
7o > and 71 > such that (Rq, RI) is the solution to the following optimization problem 



max 

(KoA)eC s 9 



70-R0 + 71-Ri 



(28) 



Therefore, the power allocation p* that achieves the boundary point (Rq, Rf) is the solution 
to the following optimization problem 

7oRo(p) +7i-Ri(p) 



max 



max 

p€V 



70 min { R 01 (p) , R 02 (p) } + 7^ (p) 



(29) 



where Ro(p) and R\(p) indicate the bounds on Rq and Ri in (|25|) . We further define -Roi(p) 
and -R02G ) to be the two terms over which the minimization in Ro{p) is taken, i.e., Ro{p) = 
mm{R i(p) , R 02 {p)} ■ The optimization ( |29i) serves as a complete characterization of the 
boundary of the secrecy capacity region of the parallel Gaussian BCC. The solution to (1291) 
provides the power allocations that achieve the boundary of the secrecy capacity region. Our 
goal now is to solve the optimization problem fl29|) . 
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The optimization problem (1291) is a max-min optimization, and can be solved by the 
approach used in [47]. The main idea is contained in Proposition 1 in [47], which is stated 
in the following lemma. 

Lemma 2. The optimal p* that solves f l2"9~j) falls into one of the following three cases: 



By applying Lemma [2], we obtain the optimal power allocation p* that solves (129]) . 

Theorem 3. The optimal power allocation vector p* that solves (1291) and hence achieves the 
boundary of the secrecy capacity region of the parallel Gaussian BCC has one of the following 
three forms. 

Case 1: p* = p^ l > if the following satisfies i?oi (p^ 1 ') < R02 (p^) ■ 



Case 1: p* maximizes 70-R01G ) + 7i^i(p)> an d Roi(p*) < Rq2(p*)] 




(30) 



where < a < 1 is such that i?oi(p*) = -R02G0*), and a = 1 — a. 



For leA, if — > 
7o 



2 ■ 





Aln2 



2 7 i 



(31) 








where X is chosen to satisfy the power constraint 




(32) 
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Case 2: p* = p^ if the following p^ satisfies _R i (p^) > R02 (p^) ■ 



2 

For I & A, if — > ^ 



2 2 ' 
7o vf - nf 



2Aln2 V7o 



(2) 



(33) 



7l / 2 2\ 2 

7o 

where A is chosen to satisfy the power constraint defined in ( 132]) . 

Case 5: p* = p( a > if there exists < a < 1 suc/i t/iat the following p^ satisfies i?oi 
i2o 2 (p (Q!) )- 

For leA, if — > -\ p-, 

7o vf - Hi 



2VV' ^ 21n2A/ Aln2 w n; 41n2A 



p[? - (hub y w - , D (, f - , F + ^) - 1 w + ^ 



7o 



7i «z/ 2 + a/i 2 

y — 2 2 ' 
7o vf ~ Hi 



Pio y 2 \V l * 2U.2A/ Alu2* ' " 2 V" ' 2 h, 2A 

p!i Q) = 



(34) 
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where X is chosen to satisfy the power constraint defined in ( 13"2"j) . 



The proof of Theorem [3] is relegated to Appendix Based on Theorem [3j we provide the 
following algorithm to find the optimal p*. 



Algorithm to search p* that solves (1251) 



Step 1. 


Find p^ given in (|3ip. 




If i? i~(p (1) ) < R02 (p (1) ), then p* = pC 1 ) and finish. 




Otherwise, go to Step 2. 


Step 2. 


Find p( 2 ^ given in (|33|) . 




If Rqi (p^) > R02 (p^), then p* = p^ and finish. 




Otherwise, go to Step 3. 


Step 3. 


For a given a, find p^ given in (1M1). 




Search over < a < 1 to find a that satisfies i?oi (p^) = R02 (p^). 




Then p* = p( a ) and finish. 



4 Fading BCCs: Ergodic Secrecy Capacity Region 

In this section, we study the fading BCC (see Fig. HJ), where the channels from the source 
node to receivers 1 and 2 are corrupted by multiplicative fading gain processes in addition 
to additive white Gaussian processes. The channel input-output relationship is given by 

Yi = h u X % + W t , 

(35) 

Zi — huX-i + Vi, 

where i is the time index, Xi is the channel input at the time instant i, and and Zi are 
channel outputs at the time instant i at receivers 1 and 2, respectively. The channel gain 
coefficients hn and Ji2i are proper complex random variables. We define := (hu, h2i), and 
assume {h^ is a stationary and ergodic vector random process. The noise processes {Wi} 
and {Vi} are zero-mean i.i.d. proper complex Gaussian with Wi and Vi having variances /i 2 
and z/ 2 , respectively. The input sequence {Xi} is subject to the average power constraint P, 
i.e.,£5XiE[X?]<P. 

We assume that the channel state information (i.e., the realization of is known at both 
the transmitter and the receivers instantaneously. The channel state information at the 
source node can be realized by a reliable feedback from the two receivers, who are supposed 
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Figure 4: Fading BCC 



to receive information from the source node. Depending on the channel state information, the 
source node can dynamically change its transmission power to achieve better performance. 
In this section, we assume that there are no delay constraints on the transmitted messages, 
and the performance criterion we study, i.e., the secrecy capacity region, is averaged over all 
channel states and is referred to as the ergodic secrecy capacity region. 

It can be seen that for a given fading state, i.e., a realization of h i} the fading BCC is a 
Gaussian BCC. Hence the fading BCC can be viewed as a parallel Gaussian BCC with each 
fading state corresponding to one subchannel. Thus, the following secrecy capacity region 
of the fading BCC follows from Theorem [2J 

Corollary 5. The secrecy capacity region of the fading BCC is 
(Ro,Ri) : 



c= U 



Ro < min < Eh eA log 1 



Po(h)\hi 



E heA log I 1 



^ 2 +Pi(h)\h 1 \ 

12 



Pa(h)\h 2 



v 2 + Pl (h)\h 2 \ 2 



E h&A c log 



E h£A c log 



l Po(k)\h 



l Po(k)\h 



Rl < EftgA 



log 1 



log 1 + 



Pi(k)\k 



|2\ 1 




(36) 

where A := < h : > \- The random vector h = (hi, h 2 ) has the same distribution as 



the marginal distribution of the process {hA- at one time instant. The set V is defined as 

V = [p(h) : E A [p (h)+Pi(h)] + E A c\p (h)] < p}. (37) 

Remark 4. The secrecy capacity region given in Corollary{5\is established for general fading 
processes {hj} where only ergodic and stationary conditions are assumed. The fading process 
{Ik} can be correlated across time, and is not necessarily Gaussian. 



Remark 5. The secrecy capacity region given in Corollary^ also applies to the case in which 
the two component processes {hu} and {h 2 i} are correlated. However, the secrecy capacity 
region does depend on the correlation between the two processes. In fact, the average in 
(|36|) needs to be taken over the joint distributions of hu and h 2 i to derive the correct secrecy 
capacity region. 

This fact can be seen from the following example. We assume only the confidential message 
is transmitted, i.e., Rq = 0. We also assume that both hu and h 2i take the values of (0, 1) 
with equal probability (1/2, 1/2). We first consider case 1 in which hu = h 2i . From fl36|) it 
is clear that Ri = 0, i.e., no secrecy capacity is possible, because the channels to the two 
receivers are the same for all channel realizations. However, for case 2 in which hu = 1 ~ h 2 i, 
from (pjj) the secrecy capacity equals log ^1 + jj^J , where the power is only allocated to the 
channel states where hu = 1 and hu = 0. From this example, one can see that the correlation 
between hu and h 2 % affects the secrecy capacity region, although the marginal distributions 
of hu and hu are same for the two cases. We further note that this fact is consistent with 
Lemma[T]because hu and h 2 i are now considered as channel parameters (with each realization 
corresponding to one subchannel) due to CSI availability at the transmitter. The channel 
statistics come only from the additive Gaussian noise terms for each subchannel with one 
realization of hu and h 2 i- 

Remark 6. The secrecy capacity region in Corollary\£^is established for the case with general 
correlation between the noise variables Wi and 

From the bound on Ri in (1361) . it can be seen that as long as A is not a zero probability 
event, positive secrecy rate can be achieved. Since fading introduces more randomness to the 
channel, it is more likely that the channel from the source node to receiver 1 is better than 
the channel from the source node to receiver 2 for some channel states, and hence positive 
secrecy capacity can be achieved by exploiting these channel states. 

Since the source node is assumed to know the channel state information, it can allocate its 
power according to the instantaneous channel realization to achieve the best performance, 
i.e., the boundary of secrecy capacity region. The optimal power allocation that achieves the 
boundary of the secrecy capacity region for the fading BCC can be derived from Theorem [3] 
and is given in the following. 
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Corollary 6. The optimal power allocation p*(h) that achieves the boundary of the secrecy 
capacity region of the fading BCC falls into one of the following three cases. 

Case 1: p*{h) =p w (h) if the following pW (h) satisfies R i(p {1) (h)) < R 02 (p {1) (h)) . 

For he A, if —> 

7o - n~\iii\- 



v 2 \h 


2 




2 -/2 2 \h 2 \ 2 



Aln2 V7o 7 VN 2 \h A2 



(D/^ ( 1 f " 2 fi 2 \ { v 2 /i 2 47i \ 1 / /i 2 v 2 



7i / v 2 fi 2 N 



70 VN 2 MV 



+ 



''2| 



12 



ForheA c , p { L) (h) 



Ti ^|fei| 2 (i) (h) _(_To + (i) ^ _ Q 

(i)^M _ ( '7° 



A In 2 \hi 



(38) 



T/ie parameter A chosen to satisfy the following power constraint 

Ea \po(h) + Pi(h)} + E A c\p Q (h)} < P. (39) 

Case 2: p*(h) = p (2) (h) if the following p^ (h) satisfies R i(p (2) (h)) > i? 02 (p (2) (k)) . 

mi a • <• 7i A* 2 1 ^-2 1 2 

For he A, if -!-> ; 1 1 



Aln2 \7o / \l^2| 2 |^i 



2V VN 2 |^i|V V> 2 | 2 |/ii| 2 AI112; 2 Vl^il 2 1^2 



71 lv 2 fi 2 \ 11 2 



7o VN 2 \h x \ 2 ) 



|2 



if 21 < j 2 ) ( h )-(-^ — ^ (h)-o 



For liG^, p z; (/i) 



Aln2 |/i 2 | 2 



(40) 
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where A is chosen to satisfy the power constraint defined in 

Case 3: p*(h) = p^(h) if there exists < a < 1 such that the following p^ (h) satisfie 
R m {p {a \k)) = R m {p^{h)). 



For he A, if — > 

7o 



av 2 \h x \ 2 


+ a/j, 2 \h 2 2 


z/ 2 |/n| 2 


-ti 2 \h 2 \ 2 
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p[ a \h) = 



ForleA, p + __^__-_ 



_^ 7p_ 

2 VM 2 N 2 Aln2 / 



where A zs chosen to satisfy the power constraint defined in f l39|) . 



(41) 



If the source node does not have common messages for both receivers, and only has con- 
fidential messages for receiver 1, the fading BCC becomes the fading wire-tap channel. For 
this channel, the secrecy capacity is readily obtained from Corollaries [5] and [6j 
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Corollary 7. The secrecy capacity of the fading wire-tap channel is 



C s = max Ea 

E A [p(h)]<P 



log 1 + 



P(h)\hi 
Ai 2 



- log 1 



p(h)\h 2 



(42) 



The optimal power allocation that achieves the secrecy capacity in (1421) is given by 



P\h) 



1 



fi 



2 \ + 



Aln2 {hi 2 



\h,\ 2 



0. 



if \ha 



0; 



/ii| 2 7 V Aln2 \hx\ 



+ 



^l 2 



+ 



if |/i 2 | 2 > 0, he A; 



otherwise 



(43) 



where A zs chosen to satisfy the power constraint E^^/t)] = P 



5 Fading BCCs: Outage Performance 

In Section HI we considered the ergodic secrecy capacity region for the fading BCC In this 
case, messages can be coded over long block lengths and hence over all channel realizations. 
This applies to wireless systems in which the transmission delay can be tolerant. In this 
section, we consider wireless systems in which there is a stringent delay constraint, and 
messages must be transmitted within a certain time. 

We adopt the channel model described in However, we now take the block fading 

assumption, where the fading coefficients hu and hn remain constant over one block and 
change to another realization in the next block in an ergodic and stationary matter. More- 
over, we assume that the block length is large enough such that coding over one block can 
achieve small probability of error. We assume that the delay constraint is within the block 
length. Coding over multiple blocks and hence over multiple channel state realizations is not 
allowed. We also assume that both the transmitter and the receivers know the channel state 
information. 
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We use (Rq, Ri) to indicate a target rate pair, i.e., the common and confidential messages 
need to be transmitted to the two receivers at the rates i?o and R\, respectively, in each 
block (each fading state realization). If the target rate pair is not achieved for one block, an 
outage is claimed. We define the outage probability to be 

P out = Pr{(R , Rt) i C s (h,p(h))} (44) 

where C s (h,p(h)) is the secrecy capacity region for the channel with fading state realization 

h, and p(h) indicates the transmission power used by the source node for this fading state. 
The source node is able to adapt its transmission power to the instantaneous channel state 
realization, i.e., p(h) is a function of h, because CSI is assumed to be known at the transmit- 
ter. We assume that the power constraint applies over a large number of blocks and hence 
over all fading state realizations (i.e., it is a long term power constraint as in [16]); that is, 
we assume 

E\p(h)] < P. (45) 

We define the set V := {p{h) : E\p(h)] < P}. 

It is clear from (l4~4l) that the outage probability depends on the power allocation function 
p(h). Our goal is to study the power allocation p*(h) that minimizes the outage probability, 

i. e., 

min P out . (46) 
p(h)er 

To understand this problem, we note that for each channel state the source node knows 
how much power it needs to use to support the target rate pair. If the power needed is too 
large, the source node may decide not to transmit and claim outage in order to save power 
for other channel states that need lower power to support the target rate pair. Hence the 
source node first allocates power to those channel states that need lower power to support 
the target rate, and then to those channel states that need higher power to support the 
target rate until all power is utilized. This suggests that the power allocation is a threshold 
decision. 

To formally solve the optimization problem f|46|) . we apply the approach in [16], where the 
minimum outage probability of the fading channel without a secrecy constraint was studied. 
This approach was also applied in [10] to study the minimum outage probability of the 
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fading broadcast channel without a secrecy constraint. In the following, we describe the 
power allocation that minimizes the outage probability of the fading BCC, i.e., the solution 

to am. 



For a given block with the fading state realization h = (hi, h 2 ), the channel we consider is 
a Gaussian BCC. From Corollary [U the secrecy capacity region is given as follows. 

If h E A, 

(Rq,Ri) '■ 



Cs(h, P (h))= |J < 
0</3<l 



Ro < log + 

Ri < log (1 + 



(1-P)p(h)\h2\ 
v 2 + (3p(h)\h 2 \ 2 J ' 

Pp(h)\hi\ 2 \ , A , Pp(h)\h2\ 2 



-log 1 



If heA c 



(R ,Ri) : 
C s (h,p(h)) = { R < log (l + 
R 1 = 



(47) 



We now use f )47|) to compute the minimum power that is needed to achieve the target rate 
pair (Rq, Ri). It is clear from ( 14T1) that, only when he A can we possibly achieve a positive 
Ri. The minimum power needed to achieve .Ri is 

(48) 



OG 



otherwise 



The minimum power to support Rq is then given by 

>l| 2 X/ 2 



IM 2 



00 



Hence the minimum power needed to support (^o> Ri) is 
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otherwise 



otherwise 



(49) 



(50) 
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For s > 0, we define 




(51) 



where p min (h) is given in (I577j) . 



The average powers that are needed to support the rate pair (R Q , Ri) for the channel states 



in TZ(s) and 7Z(s) are 




For the given power constraint P, define 



s* = 



sup{s : p(s) < P} 
P-p(s*) 



(53) 



p(s*) — p(s*) 

By using fl50l) and applying Lemma 3 and Proposition 4 in [16], we obtain the following 
optimal power allocation p*(h). 

Proposition 1. The power allocation p* (h) that solves (j4"6l) . and hence minimizes the outage 



where p mm (h) is given in ( |50l) . 

It can be seen that the optimal power allocation p*{K) is a threshold solution. The power is 
first allocated to the fading states that need smaller amounts of power to achieve the target 
rate pair, and is then allocated to the fading states that need larger amounts of power to 
achieve the target rate pair. When the total power P is used up by these fading states, no 
further power is allocated to other states. 

In the above problem setting, an outage is claimed if either R or Ri is not achieved. This 
results in an optimal solution p*(h) that allocates power only to those states for which both 



probability for a given target rate pair (Rq,Ri), is given by 




ifheTlis*) 

with probability w* if he 7£(s*)\7?.(,s*) 
ifh(£K(s*) 



(54) 
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-Ro an d R\ can be achieved by relatively small power consumption. However, some channel 
states may support one target rate with small power consumption, but need a large amount 
of power to support both rates. These states are unlikely to be allocated power. For example, 
even if the channels from the source node to both receivers are good to transmit common 
messages, it may happen that no power is allocated to this fading state if the channel from 
the source node to receiver 1 is worse than the channel from the source node to receiver 2 
so that -Ri cannot be achieved. Sometimes this is not reasonable, because the two messages 
are independent, and one message should be transmitted whenever the channel is good to 
transmit it. It should not depend on whether the other message is transmitted or not. 
Nevertheless, the solution to the problem (T4"6"j) we have considered is useful if we consider 
the following two more reasonable problems. 

It is clear that the solution to the problem (1461) immediately implies the optimal power 
allocation for the case where only the confidential message is transmitted and only the target 
rate R\ is assumed. Now the minimum power to achieve R\ is given by 

if Ri < log 



\h) = {^f-2^ — NIV (55) 

oo otherwise 

The power allocation that minimizes the outage probability follows from Proposition [1] by 
using (1551) to replace (1501) in (E 



We next consider the scenario in which the source node has both common and confidential 
messages to transmit. We assume that the common message is required to be transmitted 
at a constant rate Rq for all channel states, i.e., no outage is allowed for the common rate. 
This scenario applies to wireless systems where a constant common rate must be satisfied. 
Since -Ro must be achieved for all channel states, the total power must be large enough to 
support this rate, i.e., 

P > P := E\p (h)\ (56) 

where Po(h) is the power that is needed to support the rate -Ro f° r the channel state h and 
is given by 

2^0 _ i 

p (h) = P (57) 



mm 



ifeii 2 Ml 

i/ 2 
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In addition to the common message, the source node wishes to transmit confidential infor- 
mation to receiver 1 at a target rate -Ri and with as small an outage probability as possible. 
We note that a similar problem was studied in [10] for the broadcast channel with separate 
messages for two receivers and the rate to one receiver must be constant for all channel 
states. 

We need to find the power allocation that minimizes the outage probability that the target 
rate .Ri is not achieved. The optimization problem is summarized as follows: 
Minimize Pr{(R , R t } <£ C(h,p(h))} 

Subject to E\p(h)) < P (58) 

i?o is achieved for all h, i.e., p(h) > Po{h) 

We can change the problem (1581) to the following equivalent problem 

Minimize Pr{{R , Rx} £ C{h,p{h))} 

(59) 

Subject to E[Ap{h)} < P - P 
where Ap(h) = p(h) — po(h) is the difference between the power needed to support (-Ro, -Ri) 
and the power needed to support Rq only. 



It can be seen that the problem (159]) is the same as the problem fj46|) with p(h) in (H61) 
being replaced by Ap(h). Thus the optimal Ap*(h) can be derived from Proposition [1] with 
p mm (h) in fl5ll) being replaced by Ap mm (h), which is the minimum difference between the 
power needed to support (Ro, Ri) and the power needed to support -R and is given by 

2 R f 2«i - l' 



if Ri < log 



Ap mm (h) = { ML _ 2 R,Mi' 1 6 \^\ 2 ^ 2 (60) 

oo otherwise. 



6 Numerical Results 



In this section, we provide numerical results to demonstrate the ergodic and outage perfor- 
mance for the fading BCC 

We first consider the Rayleigh fading BCC, where h\ and /i2 are zero mean proper complex 
Gaussian random variables. Hence \h\\ 2 and |/i2| 2 are exponentially distributed with param- 
eters o\ and o"2. We assume the source power P = 5 dB, and fix <j\ — 1. In Fig. [5], we plot 
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Figure 5: Secrecy capacity regions for a Rayleigh fading BCC 

the boundaries of the secrecy capacity regions corresponding to cr 2 = 0.4, 0.7, 1, respectively. 
It can be seen that as <72 decreases, the secrecy rate R\ of the confidential message improves, 
but the rate Rq of the common message decreases. This fact follows because smaller 
implies worse channel from the source node to receiver 2. Thus, confidential information can 
be forwarded to receiver 1 at a larger rate. However, the rate of the common information is 
limited by the worse channel from the source node to receiver 2. 

For the Rayleigh fading BCC with o\ = 1 and Oi = 0.4, we plot the boundary of the 
secrecy capacity region in Fig. [6] The three cases (see Corollary [6]) to derive the boundary 
achieving power allocations are also indicated with the corresponding boundary points. It 
can be seen that the boundary points with large R\ are achieved by the power allocations 
derived from Case 1, and are indicated by the line with circle on the graph. The boundary 
points with large Rq are achieved by the optimal power allocations derived from Case 2, and 
are indicated by the line with square. Between the boundary points achieved by Case 1 and 
Case 2, the boundary points are achieved by the power allocations derived from Case 3, and 
are indicated by the plain solid line. 

The intuitive reason how the three cases associate with the boundary points is given as 
follows. To achieve large secrecy rate Ri, most channel states in the set A where receiver 1 
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Figure 6: Three cases in power allocation optimization to achieve the boundary of the secrecy 
capacity region for a Rayleigh fading BCC 



has a stronger channel than receiver 2 are used to transmit the confidential message. The 
common message is hence transmitted mostly over the channel states in the set A c , over 
which the common rate is limited by the channel from the source node to receiver 1. Thus, 
power allocation needs to optimize the rate of this channel, and hence the optimal power 
allocation follows from Case 1. To achieve large Ro, the common message is forwarded over 
the channel states both in A and A c . It can be seen that in average the source node has a 
much worse channel to receiver 2 than to receiver 1, and hence the channel from the source 
node to receiver 2 limits the common rate. Power allocation now needs to optimize the rate 
to receiver 2, and the optimal power allocation follows from Case 2. Between these two cases, 
power allocation needs to balance the rates to receivers 1 and 2 and hence follows from Case 
3. 

We next consider the case in which R Q = 0, i.e., only the confidential message is transmitted 
from the source node to receiver 1. We assume o\ — a? — 1- I n Fig- El (a), we plot the optimal 
power allocation pl(h) as a function of h. It can be seen from the graph that most of the 
source power is allocated to the channel states with small \h 2 \ 2 . This behavior is shown 
more clearly in Fig. 0(b), which plots p I (h) as a function of \hi\ 2 for different values of |/?-2| 2 , 
and in Fig. [7] (c), which plots p{(h) as a function of |/i2| 2 for different values of \hi\ 2 . The 
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source node allocates more power to the channel states with larger \hi\ 2 to forward more 
confidential information to the destination node, and allocates less power for the channel 
states with larger |/i 2 | 2 to prevent receiver 2 to obtain the confidential information. It can 
also be seen from Fig. [7J (b) and Fig. [7J (c) that the source node transmits only when the 
channel from the source node to receiver 1 is better than the channel from the source node 
to receiver 2. 

For the case in which Rq = 0, Fig. [H] plots the secrecy capacity achieved by the optimal 
power allocation, and compares it with the secrecy rate achieved by a uniform power allo- 
cation, i.e., allocating the same power for all channel states h& A. It can be seen that the 
uniform power allocation does not provide performance close to the secrecy capacity for the 
SNRs of interest. This is in contrast to the Rayleigh fading channel without the secrecy 
constraint, where the uniform power allocation can be close to optimal even for moderate 
SNRs. This also demonstrates that the exact channel state information is important to 
achieve higher secrecy rate. 

We now consider the outage performance of the Rayleigh fading BCC We assume o\ = 10 
and o"2 = 0.5. We first assume the target rate .Ro = 0, i.e., only the confidential message 
is transmitted. In Fig. EH we plot the outage probabilities corresponding to different values 
of the target rate R\. The outage probability decreases as the target rate .Ri decreases. 
For a fixed R\, the outage probability is bounded below by a certain threshold. This fact 
follows because the outage probability cannot be prevented for those channel states where 
the channel from the source node to receiver 1 is worse than the channel from the source node 
to receiver 2. In Fig. [TQ], we compare the outage probability when R = with the outage 
probability when i? = 0.1 bps/Hz. It can be seen that even a small positive common rate Rq 
can cause large increase in outage probability. In Fig. [TH we compare the outage probability 
minimized by the power allocation and that achieved by the equal power allocation for all 
channel states. It can be seen that optimizing power allocation significantly reduces the 
outage probability. 
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(c): p*(h) as a function of | /is | 2 
Figure 7: Optimal power allocation for a Rayleigh fading BCC with Rq = 
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Figure 8: Comparison of secrecy capacity by optimal power allocation with secrecy rate 
uniform power allocation for a Rayleigh fading BCC with Rq = 
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Figure 9: Outage probabilities for a Rayleigh fading BCC with R = 



32 
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Figure 11: Comparison of outage probabilities achieved by optimal power allocation with 
those achieved by equal power allocation for a Rayleigh fading BCC with R = 



33 



7 Conclusions 



We have established the secrecy capacity region of the parallel BCC, where a converse proof is 
given to show that independent input to each subchannel is optimal. We have also established 
the secrecy capacity region for the parallel Gaussian BCC, and have characterized the optimal 
power allocations that achieve the boundary of this region. One fundamental result we have 
established is the secrecy capacity region of the Gaussian BCC, which complements the 
secrecy capacity region of the discrete memoryless BCC given by Csiszar and Korner in [5]. 

We have further applied our results to obtain the ergodic secrecy capacity region for the 
fading BCC and the optimal power allocations that achieve the boundary of the secrecy 
capacity region. Our results generalize the secrecy capacity results that have been recently 
obtained in [12], [13] and [14] (full CSI case). We have also studied the outage perfor- 
mance of the fading BCC. We have obtained the power allocation that minimizes the outage 
probability that certain target rates are not achieved. 



Appendix 

A Proof of Theorem d 

The achievability follows from [5, Corollary 1] by setting Q = (Qi, . . . ,Ql) (Q is indicated by 
U in [5]), U = (U 1 ,..., U L ) (U is indicated by V in [5]), X = (X u . . . , X L ), Y = (Y 1? . . . , Y L ), 
and Z = (Z\, . . . , Zl) with Q, U and X having independent components. Furthermore, we 
choose the components of these random vectors to satisfy the Markov chain conditions: 
Q, -> U t - X l -> (Y h Z{) for I = 1, 2, . . . , L. 

To show the converse, we consider a code (2 nR °, 2 nRl ,nj with the average error probability 
P e . The probability distribution on W x W\ X L , x ^ x Z™ x ^ is given by 

P( w O> w U x Tl,L]>y[l,L}> z [l,L]) 

A A ( 61 ) 

= p(wo)p(wi)p(xf hL] \wo,Wi) [[ [[ pi(y u , zu\xii) 

i=l 1=1 
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By Fano's inequality [46, Sec. 2.11], we have 

H(W , WxlY^) < n(R + R x )P e + 1 := nS 1 
H(W \Z^ L] )<nR P e + l:=n5 2 

where 5%, 62 — > if P e — > 0. 

For I — 1, 2, . . . , L, we define the following auxiliary random variables: 

Qli '■= (W^i^,l-l]^l iZ?[i+l]iZ[l+X,L])i 

U u := {W X ,Q U ). 

We note that (Qu, Uu, Xu, Yu, Zu) satisfies the following Markov chain condition: 



(62) 



(63) 



Q H ^U ll ^X H ^{Y u ,Z li ). (64) 

We first bound the common rate Rq as follows. 

nR = H(W ) = I (W ; Y$ M ) + H(W \Y$ M ) 

(a) L 

<^J(^o;^l>[i,/-i]) + ^i 
1=1 

L n 

- E E J (^; YulY^Yr 1 ) + nS 1 
1=1 i=i 

(c) L n 

< EE^^^-i]^- 1 ^^.^;^) + ^1 

i=l i=l 
L n 



(65) 



i=l i=l 

where (a) follows from the chain rule and Fano's inequality, (b) follows from the chain rule, 
(c) follows because I (A; B\C) < I {A, C;B), and (d) follows from the definition (163"]) . 
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We can also bound the common rate R as follows. 

nR = if (W„) = /(W ; Z^ L] ) + H(W \Z? 1>L] ) 

L 

<J2HWo;Znz; +hL] )+n5 2 
1=1 

L n 

= E E 7 (wb; + ^ 2 

1=1 i=l 
L n 

< E E ^W^-i]!?- 1 ^!]^!^; ^) + n8 2 
1=1 i=i 

L n 

= E E + n ^ 2 

J=l i=l 
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We now bound the rate Ri and obtain: 

nR 1 ( ^nR e <H{W l \Z^ 

= H(W 1 \W Zl L] ) + I{Wi, W \Zf 1M ) 



I(W i; Y^ L] \W ) - I(W i; Z^ L] \W ) + H(W 1 \W Y^ 



(6) 
< 

< J(Wi; ^IWo) - I(Wi; Z$ tL] \W ) + n(5 1 + 5 2 



E [HWi; YnWoY^) - I{W X] Zr\W Z^ L] )\ + n(5 1 + 5 2 ) 
1=1 

L n 

E E [W; y«| Wo^ijlT 1 ) - ^|^o^ +1] ^ +1 , L] )l + rift + * 2 ) 



(<*) 



i=l 1=1 

L n 



(<0 



E E [A^ mI ^. 1>£] ; y K | WoV^-i]!?- 1 ) - J(^ +1] ^ +1>L] ; yjilWbWi^ajir 1 ) 

Z=l i=l 

- /(w^uir 1 ; ^l^o^ +1] ^ +lli] ) + ipfo-itf- 1 ; z u\w w 1 zr [i+1] z^ l+1M ) 

+ n{8 x + 5 2 ) 

L n 

E E [W^+il^+i,^ YulWoYg^YT 1 ) - HWiY^Yt 1 ; Z tt \W Z? m] Z$ +lM ) 

1=1 i=l 

+ n(<Ji + <5 2 ) 

L n 

E E [ 7 (^[m]^+i,£]; ^iWb^a]!?" 1 ) + r K | ^o^-^r 1 ^!]^^]) 
i=i i=i 

- /(^^nYr 1 ; Z u \W ZH i+1] ZJl +1>L] ) - I(W i; ZulWoY^Y^Z^Z^ 
+ n(5 1 + 5 2 ) 



(/) 



(3) 



L n 

E E [W; y «l wbi^i-i]i7- 1 ^i 4 . 1 ]^4.i > L]) - ^iwo^jif- 1 ^^ 

i=l 1=1 

L n 

E E [ J ( % - w«) - J ( % ' + + ^) 

Z=l i=l 



(67) 

where (a) follows from the perfect secrecy condition, (b) follows because I(Wi; Wo\Z^ L ,) < 
H(Wo\ZJ^ (c) follows from Fano's inequality, (d) follows from the chain rule, (e) and (/) 
follow from Lemma 7 in [5] , and (g) follows from the definition f|63l) . 



We introduce a random variable G that is independent of all other random variables, and 
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is uniformly distributed over {1,2,..., n}. Define Qi = (G, Qig), Ui = (G, Uiq), X\ = X LG , 
Y\ = Yia, and Zi = Zi G for I = 1, . . . , L. Note that (Qi, Ui, Xi, Yi, Z{) satisfies the following 
Markov chain condition: 



Q l ^U l ^X l ^{Y h Z l ), 



for I — 1, . . . , L. 



(68) 



Using the above definitions, (J55|) . (jHSJ) and flBTl) become 



L L 



i=i i=i 

L L 



R < ^/(Qk?; z lG \G) + 5 2 < Y^HQv, z i) + ^ 



(69) 



Z=l 1=1 



L 



Z=l 



Therefore, an outer bound on the secrecy capacity region C s is given by the following set: 



where the union is over all probability distributions p(q[i t L], u [i,l], x [i,l], V[i,l], z [i,l])- Fi- 
nally, we note that each term in (1691) depends only on the distribution p(qi,Ui,Xi,yi, z{). 
Hence there is no loss of optimality to consider only those distributions that have the form 
Y{f =1 p(qi, Ui, xi)p(yi, Zi\x{). This concludes the converse proof. 

B Proof of Theorem [2 



By Lemma dj we need to prove Theorem [2] only for the channel defined by (|24p . 

The achievability follows by applying Corollary [3] and choosing the following input distri- 
bution 

for I e A, Qi ~ Af{0,Pio), X[ ~ J\f(0,pn) with X{ independent of Q h 




(70) 



X% — Qi + X[\ 
for ZG A c ; X,~JV(0,j? jo ). 



(71) 
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To show the converse, we first apply (1551) and obtain 

L n 

1=1 i=i 

n n 

< E E / ( < ?«; + E E I{Xi " y «) + ^ 

£gA i=i zgA c i=i 

n n 

= E I>( y «) - ^(^iqk)] + E Ew y «) - ^woi + 

zeA i=i (gA c i=i 

^ E E 2 log 2776 + ^) - E E KYu\Q*) 

leA i=i leA i=l 

n 1 n 

+ E E 2 log 27re + ^) - E i lo s 27re ^ + 72,51 

zeA c i=i zgA c 

i=l / ZgA i=l 

+ E i log 2716 u E EX % + ^ ) - E \ lo s 27re / i ' + nJ i 

zeA c \ i=i / zgA c 

< \ log 2vre (p, + ^) " E E + E \ lo S f 1 + §) 

ZgA ZgA i=l 2eA c ^ ' 

where we define Pi = ^ Y^=i EXfi 
It is easy to see that for I 6 A 



-2 



E < E h{Y i*) < \ log 2vre (p, + /if) 

i=l i=l 



and 

n n 

Y h (Yu\Qu) > E^W = ^log2vre/i 



2 

i=l i=l 



Hence there exists < (3i < 1 such that 

n 

E^Wk) = |log27re(Ap/ + 
i=l 

Applying ( 1751) to ( 1721) . we obtain 

— S^( 1+ fe») + £^( 1+ S + 



n5i 
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We apply (ItjoT) . follow the steps that are similar to those in (1721) . and obtain the following 
bound 

nR < \ lo S 27re [Pi + "?) "EE + E 1 lo S f 1 + + nJ 2 (77) 

/g^ leA i=i ieA c ^ 1 ' 

For the second term in the preceding equation, we apply the entropy power inequality and 
obtain 

h(Zu\Qu = q u ) = h(Y u + V/^Qu = q u ) 

> - log (2 2hl yu\Qu=qu) + 2 2h (V l ' l \Qu=qu)^ 



(7i 



- log (2 2 MW«=*0 + 2vre(z/ 2 - tf)) 
2 



Hence 



n 1 n 

Y,KZ H \Q H ) > ^Elog(2 2 ^^=-) + 27 re(^-^)) 



2 

i=l i=l 



C 1 1 n 

> - ]T log (2 2E ^»I^=^) + 27re(z/, 2 - / u 2 )) 



2 



2 

i=l 



1 

(6) 
> 

(c) n 

log (2ire{(3 lPl + uf)) 



(79) 



> | log (V^i^l^ + 27 re(i/ 2 - tf)) 
2 log (27re(A K + /i 2 ) + 27re(vf - /i 2 )) 



n 
2 



where (a) and (6) follow from Jensen's inequality and the fact that \og(2 x + c) is a convex 
function of x, and (c) follows from (1751). 



By applying (1791) to (177)) . we obtain 

^2 V PiPi + v?J tl. 2 V 



We apply ()67j) . follow the steps that are similar to those in (1211) . and obtain the following 
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bound 

n 

leA i=i 

n 

= 1212 \ h (Yu\Qu) - h(Yu\X H] Q u ) - h(Z u \Q u ) + h(Z u \X u ; Q K )] + n(5i + <f 2 ) (81) 

+ n(5 1 + 5 2 ) 



ieA i=l 
ieA L 



2 log ( 1 + 7Ti"2 log ( 1 + ^r 



where the last equality follows from fl75l) and (j79|) . 

For I G A, we define pm = (1 — fii)pi and pn = ftipi. For / G v4 c , we define pzo = Pi- It is 
clear from (123]) that 

$>io+Pii] + 5>io<P (82) 



ieA 



ieA c 



This concludes the proof of the converse. 



C Proof of Theorem [3 



We apply Lemma [2] and consider the following three cases. For each case, we apply the 
technique in [8] to solve the optimization problem. 

Case 1: We need to find p^ G V that maximizes 70-R01G ) + l\Ri{p)- If P satisfies 
R01 G° (1 ^) < R02 (p^), then the optimal p* = p^> . 



The Lagrangian is given by 

ieA 



1 1 1 P 10 
log 1 + — 

2 V /xf + Pn 



7i , 1 ,Pn 



v^7o, A . Pio\ 



A 



J^^o+Pii] + ^2pio 



ieA 



i£A c 



where A is a Lagrange multiplier. 
For I G A c , Piq needs to maximize the following L\ 



r 70 1 / 1 , Pio 1 
A = y log ( 1 + — ) - A p m 



/>/<> 



7o 



— A I dx 



It is clear that p$ that optimizes £/ is either the root of the following equation 

7o 1 



21n2 tf + x 



A = 



(83) 



(84) 



*5) 
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if the root is positive or zero, i.e., 
For I e A, and pj^ need to maximize the following L\ 

^l l0 < 1 + ^) + y'-( 1 + |)-y'-( 1 + Tf)-^ + -) 

rPn+Pio , . fPu 



u^(x)dx + / uji(x)dx (87) 
Jo 

(max < u\l\x), u\l\x) \ J cfe 



where 



U M( X ) - I A 



We next derive and that achieve the upper bound on L\ in flBTl) and hence maximize 

A. 

We define sc^ to be the root of Wjq ( x ) = anc ^ x ii ^° De the largest ro °t of u\l\x) = 0, 
i.e., 



(1) _ 70 2 

Xro ~ 2Aln2 ^ 



r (i) 



59) 



It can be seen that (x) and tt^ (x) intersect only once at 



x<p = ^tf-rf)-j. (90) 
7o 

In the following, we consider two cases. 
(1) J > jjZfi, i.e., xf r 1} is positive. 

It is easy to see that u\]_ (0) > w[q (0). The optimal and p z J depend on the value of A 
and fall into the following three possibilities. 
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(a) If u$(0) < (see Fig. QJ (l)-(a)), i.e., < A, then both u$(x) and u^'(x) are 
negative for x > 0. The upper bound on Ci in (187j) is achieved by = and = 0. 

(b) If ufJ^O) > andx (1) - ™« rrw-n_^ ; a To ^ x <- 7ife& 



71 (if-jfjO 



.(!)/ 



,(1), 



<r r (1) 



[see Fig.H21 (l)-(b)),i.e. 



then the upper bound on £; in (IHTj) is achieved by pg = and 



' 21n2( 7l -7o)(^ 2 -^) ^ A ^ 2^ In 2 ' 



(1) 



(c) If xfc > x^ (see Fig. 
Ci in (j57j) is achieved by p[p 

In summary, we obtain 



(l)-(c)), i.e., A < 



(i) 



21n2( 7l -7o)(^f^fI' 



then the upper bound on 



X 10 X lr 



(i) 



and p zi 



x 



(i) 

It 



,(1) 



(1) 



X 10 X lr 



mm < a^y , a;^ 



(91) 



„(i) 



(2) ^ < -jrz^p, , i-e., is zero or negative. 



It is easy to see that Uq (0) > m^^O). 
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(a) If «g 5 (0) < 0, i.e., ^2 < A ( see Fi §- 



is achieved by pj^ = and p^ = 0. 



(b) If n{ 1} (0) > 0, i.e., A < 



7o 
2/^ In 2 



achieved by = and = 0. 




► X 



(2)-(a)), then the upper bound on L\ in (jH 



(see Fig. [13] (2)-(b)), the upper bound on Ci in flH7|) is 



Figure 13: Illustration of ujg (ar) and u\[\x) for Case 1 with — < ^_ a 




(1)/ 



70 - 



In summary, we obtain 



A 1 ' 



x 



(i) 



„<;> = o. 



ieA c 



(92) 



The Lagrange parameter A needs to be chosen to satisfy the power constraint 

X>«>+Pii] + £>«>< (93) 



According to Lemma [2, if the condition R 01 (p^) < R02 (p^) is satisfied, then the optimal 



p = p 



(i) 



Case 2: We need to find p^ E V that maximizes 70-R02G ) + JiRiip)- If satisfies 
R01 (p (2) ) > -R02 (p (2) ), then the optimal p* = p (2) . 



The Lagrangian is given by 



leA 



7o 



log 1 



Pro 



i^ + Pny 2 \ nfj 2 



zeA c 



(94) 



where A is a Lagrange multiplier. 
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For I e A c , it is easy to see that 



(2) 
PlO 



7o 



2Aln2 



- v. 



(95) 



For I G A, and p\^' need to maximize the following Ci 



.(2) 



r To, /, . Pro 



+ — log ( 1 + — 



u zo (x)<ir + / M Z1 (x)o?x 



pa 

oo 



< 



,( 2 )/ 



,(2)/ 



max <; u l0 [x ) , u n [x ) 



dx 



7i , / , , Pu 



A(p«o + Pu) 



(96) 



where 



ng } (x) 
u{?(x) 



7o 



2 In 2 z/2 + x 

12), 71 / 1 



-A 



2 In 2 \^f + x if + X 



(97) 



-A 



We define to be the root of u\q(x) = and x\^' to be the root of u\^'(x) 



.(2), 



,(2) 



,(2)/ 



0, i.e., 



x 



(2) 
10 



7o 



2Aln2 



- v. 



.(2) 



2 



Aln2 



(9? 



It is clear that lijo 0*0 and u\l\x) intersect only once at 



(2), 



x 



(2) _ 71/9 



/r 



7o 



"i - Mi ) ~ 



(99) 



(2) (2) 

Following steps similar to those in Case 1, we obtain the following p ;o and p ;o that achieve 
the upper bound on Ci in ( |96i) and hence maximize 



(1) If J > -r^, i.e., x\;' is positive, 



,(2) 



(2) 

Pro 



x ro x Zr 



(2) 
Pil 



, (2) (2) 

mm <; x K n , a?;/ 



(100) 



(2) If 



< a*' a , i.e., is zero or negative, 



„(2) 



(2) 

Ho 



x 



(2) 

ro 



(2) 
Pil 



(101) 
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The Lagrange parameter A needs to be chosen to satisfy the power constraint. According 
to Lemma El if the condition i? i (p^) > R02 (p^) is satisfied, then the optimal p* = p( 2 \ 

Case 3: We need to find p^ G V that maximizes 70 (ai?oi(p) + oiRo2(p)) + 7i-Ri(p) f° r 
a given < a < 1. We then choose a to satisfy .Roi(p^) = Ro2(p^)- According to Lemma 
El if we have not found the optimal p* in Cases 1 and 2, such an a must exist. 



The Lagrangian is given by 



leA 



7o« 



log 1 + 



Pio 



\4 + Pn 



7o« 



log 1 



Pio 



vi + pn 



+ y log i 1 + ^f 



7o«, . Pro 



where A is a Lagrange multiplier. 



t'°H 1+ ? 



7o«, 1 1 1 Pro 

+ — l0 H 1 + ^F 



(102) 



£[Pro + Pa] + ^P/o 



For / G v4 c , it is clear that p^ is either the root of the following equation 

7o« I 7n« I 



1 J70« 

2In2/x? + a; 21n2if + x 

if the root is positive, or zero. Hence p$ is given by 



A 



(a) 
P/0 



7o 



21n2A 



+ 



2a7o 
Aln2 



:^ 2 - - \ [A + ^ 



70 



21n2A 



(103) 



(104) 



For I G A, p|o anc l P11 need to maximize the following Li 



where 



,7o«, , , 
+ — ^- log 1 + 



r 7o« , / , . Pro 
£ ; = — log ( 1 + -2— 

At; + PZ1 



Y log ^1 + ^ j - A(p zo + Pa) 

Pn+Pio mi 

w Z q (x)<ir + / (x)dx 



Pio 



vf + Pll 



+ ylo^ 



00 



< 



dx 



u\ x \x) 



7o 



+ 



2 In 2 + x vf + x 
7i f 1 1 



2 In 2 y /if + x uf + x 
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1 + 



Pn 
0? 



A 
A 



(105) 



(106) 



We define x$ to be the largest root of u\q\x) = and xffi to be the largest root of 




^ 21n2A/ + Aln2^ ^ 2 ^ + ^ 21n2A/ 

(107) 



It is clear that uff (x) and (x) intersect only once at 



xP = ^tf-rf)-W + <iti) (108) 
7o 



Following the similar steps to those in Case 1, we obtain 



(1) If ^ > ^?Sr > X V is positive, 



» 



(a) 
PlO 



X 



(a) 
10 



X 



(a) 
Ir 



(a) 
Pll 



■ f (a) (a)H + 



(109) 



(2) 



If 7i < ^T+a^t 
70 - uf-fi'f 



i.e., is negative or zero, 



(a) 
PiO 



X 



(«) 



(a) 

Pa 



(110) 



The Lagrange parameter A needs to be chosen to satisfy the power constraint. We finally 
choose a to satisfy R 01 (p} a) ) = R 02 {p (a) )- Then p* = pW. 
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